1892cdc8e14b7d7ea268f0ff3a687abfcd92d1d3116823a0b3360f4b0f67e43f

Sharing

Copy URL Twitter E-mail

General

Target

1892cdc8e14b7d7ea268f0ff3a687abfcd92d1d3116823a0b3360f4b0f67e43f
Size

106KB
MD5

11c307cd280fc7a23a89663901a3f390
SHA1

e448a2e4e36fd33d5cfdb8b67b6050b004916414
SHA256

1892cdc8e14b7d7ea268f0ff3a687abfcd92d1d3116823a0b3360f4b0f67e43f
SHA512

24ecea4b993cd1c90997dede7237e6b1768957d2d843c0b2380c5d9d96153f8aa400d4dd86c0f5f5641c4da11acfac18aa17701254ca784d91ecedd7f061b978
SSDEEP

3072:tOV492N5dzhtAOaFVFEzZsOvyfEtwpoMtUpY3CXo:8WQNPht6F3E9sKbkZUpY3C

Score

N/A

Malware Config

Signatures

Files

1892cdc8e14b7d7ea268f0ff3a687abfcd92d1d3116823a0b3360f4b0f67e43f
.dll windows x86

719a21cd90b0c5d0f5b1ae715aaa0199

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mciSendStringA

kernel32

GetTickCount
_lwrite
lstrcpyA
FindFirstFileA
lstrcmpiA
OutputDebugStringA
lstrcatA
_lread
_llseek
GlobalReAlloc
GlobalLock
OpenFile
_lclose
GlobalFree
GlobalAlloc
GlobalUnlock
GetWindowsDirectoryA
FindClose
CloseHandle
VirtualFree
InitializeCriticalSection
LoadLibraryA
SetStdHandle
WriteFile
WideCharToMultiByte
SetFilePointer
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetCPInfo
GetModuleFileNameA
GetACP
GetFileType
GetStdHandle
FlushFileBuffers
lstrlenA
DeleteCriticalSection
GetStartupInfoA
SetHandleCount
GetLastError
TlsGetValue
SetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
HeapDestroy
HeapCreate
TlsFree
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TlsSetValue
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsAlloc

user32

ReleaseDC
PeekMessageA
GetDC
RegisterClassA
LoadCursorA
GetClassInfoA
DispatchMessageA
TranslateMessage
GetClientRect
UpdateWindow
FillRect
GetWindowLongA
GetWindowTextA
wsprintfA
GetFocus
MessageBoxA
DefWindowProcA
KillTimer
GetWindowWord
GetParent
SetTimer
PostMessageA
SetWindowLongA
BeginPaint
EndPaint

gdi32

GetStockObject
GetDIBits
DeleteObject
CreateDIBitmap
CreatePalette
SelectPalette
RealizePalette
DeleteDC
CreateCompatibleBitmap
GetObjectA
SelectObject
CreateCompatibleDC
BitBlt

Exports

Exports

CreateUniqueFileName
DeleteSlideShow
HeapAllocElement
HeapCreateHeap
HeapDestroyHeap
HeapFreeElement
IsValidSlideShowFile
PipeLineCreateDIBPalette
PipeLineDestroyDIB
PipeLineDibToBitmap
PipeLineExtractBitmap
PipeLineLoadBitmap
PipeLineReadDIB
PipeLineReadGIF
PipeLineSaveBitmap
ReadAllSlideShows
ReadOneSlideShow
RegisterSlideShow
SSListAddNode
SSListCopyList
SSListCreateList
SSListDeleteList
SSListDeleteNode
SSListFindNode
SSListGetNth
SSListInsertNode
SSListLcbFromHandle
SSListQueryCount
SSListQueryPos
SSListQueryUserPtr
SSListSetNth
SSListSetPos
SSListSetUserPtr
SSListTraverse
SSWndProc
WriteSlideShow

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

719a21cd90b0c5d0f5b1ae715aaa0199

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 30KB - Virtual size: 29KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 10KB - Virtual size: 22KB

.idata Size: 3KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 2KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 30KB - Virtual size: 29KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 10KB - Virtual size: 22KB

.idata
Size: 3KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB

.rmnet
Size: 56KB - Virtual size: 60KB